The AWS Management Console provides a simple web interface for Amazon Web Services. You can log in using your AWS account name and password. If you’ve enabled AWS Multi-Factor Authentication, you will be prompted for your device’s authentication code.

There are several ways for you to locate and navigate to the services you need. On Console Home, you can utilize the search functionality, select services from the Recently visited services section, or expand the All services section to browse through the list of all the services offered by AWS.

At any time, you can also select the Services menu in the top level navigation bar, which also includes the search functionality and the list of all services, either grouped, or arranged alphabetically.

Q: Can I create shortcuts for the services I use?

Yes. You can add service shortcuts to the top level toolbar in the Console. Select the pin icon beside the Resource Groups menu and drag and drop the service links you want to save as shortcuts. You have the option to display the service icon alone, the service name alone, or both together.

Q: What can I expect to find under "Build a solution"?

The Build a Solution section, on the AWS Console Home page, features various simplified and automated workflows and wizards that utilize and introduce you to different AWS services in order to create the resources required to build your intended solution.

Q: What can I expect to find under "Learn to Build"?

The Learn to Build section, on the AWS Console Home page, presents training and learning resources for various solutions and use cases that might interest you. Selecting one of the categories presented in this section, you can expect to find materials such as introduction videos, webinar recordings, simple tutorials, project guides, self-paced labs, documentation, and other resources.

Q: Can I provide feedback?

Yes! Click the Feedback button at the bottom of the console. We’re eager to hear about your experience with the new console.

Q: When does my session expire?

For security purpose, a login session will expire in 12 hours when you sign into the AWS Management Console with your AWS or IAM account credentials. To resume your work after the session expires, we ask you to click the "Click login to continue" button and login again. The duration of federated sessions varies depending on the federation API (GetFederationToken or AssumeRole) and the administrator’s preference. Please go to our Security Blog to learn more about building a secure delegation solution to grant temporary access to your AWS account.

Q: What browsers does the Management Console support?

Important: As of May 1, 2016, the AWS Management Console no longer supports versions of Internet Explorer older than version 11. We recommend migrating to a more recent browser version to ensure the best possible experience and security.

A resource group is a collection of resources that share common tags. With the Resource Groups tool, you can create a custom console that organizes and consolidates the information you need based on your project and the resources you use. If you manage resources in multiple regions, you can create a resource group to view resources from different regions on the same screen.

Q: How can I use Resource Groups?

Resource Groups are a simple way to organize and find the resources that you use every day. You can create a resource group for each project, application, or environment that you manage in your AWS account. Since a resource group is simply a collection of resources that share common tags that you have applied to those resources, you can create a resource group for collections of resources that complement the way you use the AWS Management Console. Create resource groups that help you work faster and make you more productive.

Resource Groups is free to use. You will not incur any additional charges for creating or using them.

Q: Who can see my resource groups?

Your resource groups are unique to your identity. Each IAM user identity has its own Resource Groups storage, so other identities in your account will not see the resource groups that you create. However, tags on an account’s resources are visible to all identities that have permission to view tags in that account.

Q: What permissions do I need to use Resource Groups?

Click here to view the specific permissions required to use Resource Groups.

Q: How can I create a resource group using a tag substring or wildcards in my tag search?

Resource Groups lets you include resources in your resource group by identifying a tag substring. This is similar to appending a wildcard to the beginning and end of a string in the tag value field. To use this feature, begin typing a string in the tag value field of the Resource Group create or edit forms and select the Contains: option to find values that contain the characters that you typed. For example, a search using Contains: Prod value for the "Name" tag key would return a resource tagged with "FooApp-DB-Prod" as the value in the "Name" tag key. Remember, tag search is case-sensitive.

Q: How many resource groups can I create?

You can create up to 20 resource goups, unless you reach the storage limit. Since Resource Groups can be configured to search for resources based on a number of different parameters (tag key, tag value, resource type, and region), and because each parameter can be of varying lengths, each saved resource group may be a different size. If your groups are simple, you will be able to store up to 20. If your groups are complex, you may receive an error message notifying you that you have reached the storage limit. To create more resource groups, simplify your group configurations to use fewer and smaller parameters.

Q: What resource types are supported in Resource Groups?

Click here to view a list of resource types supported in Resource Groups.

Q: Why can’t I view a list of existing tag keys or values when searching for resources, or why doesn’t tag autocomplete work?

You may have limited permissions to access tag data. Click here to view the specific permissions required to use Resource Groups.

Q: Why can’t I find resources using a resource group?

You may have limited permissions to access tag data. Click here to view the specific permissions required to use Resource Groups. If you have all required permissions to use Resource Groups, check your resource group's configuration and ensure that the resources you are searching for have the correct tags.

Q: The system recognizes me as a federated user. Why are my resource groups shared, or why can't I find my resource groups after I sign out?

For federated users using SAML, resource groups are stored using the value provided for RoleSessionName. This value is configured by your organization's identity provider. More info about SAML federation setup can be found here. This value should be unique to each user authenticating with each role. If RoleSessionName is different for each session, saved resource groups will not be accessible after the session is terminated. If RoleSessionName is the same for each user, saved resource groups will be shared across all identities, and they will not function correctly.

Q: Can I provide feedback?

Yes! Click the Feedback button at the bottom of the console. We’re eager to hear about your experience with Resource Groups.

Tag Editor is a tool to view and manage tags on your AWS resources, regardless of service or region. Use the tag editor to search for resources by resource type, region, or tag, and then manage the tags applied to those resources.

Q: How can I use Tag Editor?

Click here to read documentation on the Tag Editor’s features and how to use them.

Q: What permissions do I need to use Tag Editor?

Click here to view the specific permissions required to use Tag Editor.

Q: How do tags work?

Tags are words or phrases that act as metadata for organizing your AWS resources. A tag is a key-value pair. In Tag Editor, tag keys are represented as columns, and tag values are strings in the cells of a tag key’s column. Click here to read more about how tags work.

Q: How can I bulk edit tags for multiple resources?

You can use Tag Editor to edit tags for multiple resources in multiple regions at once. In Tag Editor, select the checkboxes for each of the resources you want to edit, and then click Edit tagsfor selected. Follow the on-screen prompts to manage tags on these resources.

Q: How can I search for resources by tag substring or use wildcards in my tag search?

Tag Editor lets you search for resources by tag substring. This is similar to appending a wildcard to the beginning and end of a string. To use this feature, begin typing a string in the tag value field of the Tag Editor search form and select the Contains: option to find values that contain the characters that you typed. For example, a search using Contains: Prod value for the "Name" tag key would return a resource tagged with "FooApp-DB-Prod" as the value in the "Name" tag key. Remember, tag search is case-sensitive.

Q: How can I use the Tag Editor to search for resources that do not have a particular tag key applied or that have an empty value?

Tag Editor lets you search for resources that do not have a particular tag key applied. You can also search for resources that have a tag key applied with an empty (blank) tag value. To search for untagged resources, select the appropriate tag key, and then select "Not tagged" or "Empty value" in the tag value search field.

Q: What resource types can be tagged using the Tag Editor?

Tag Editor supports all resource types that support tags. You can view all of the services that support tags here.

Q: Why can’t I search for resources by tag?

You may have limited permissions to access tag data. Click here to view the specific permissions required to use Tag Editor.

Q: Why can’t I add, remove, or modify a tag key or value?

You may have limited permissions to access tag data. Click here to view the specific permissions required to use Tag Editor.

Q: Can I provide feedback?

Yes! Click the Feedback button at the bottom of the console. We’re eager to hear about your experience with the Tag Editor.

The app supports several authentication methods, including owner/root credentials, IAM user credentials, and AWS access keys. An owner account is the AWS login that created the account. An IAM user is an identity that has been created by an administrator through the IAM service. Note that IAM users need to also provide their account alias, which can be found at the top of the web console sign-in screen. AWS access keys are used to sign programmatic requests that the app makes to AWS.

For security reasons, we recommend that you secure your device with a passcode and that you follow an AWS best practice by creating and using an IAM user's credentials to log in to the app. If you lose your device, an IAM user can be deactivated to prevent unauthorized access. Root accounts cannot be deactivated.

Click here to learn more about the different types of AWS security credentials.

The app supports Elastic Compute Cloud (EC2), Amazon S3, Elastic Load Balancing (ELB), Amazon Route 53, Amazon Relational Database Service (RDS), Auto Scaling, AWS Elastic Beanstalk, Amazon DynamoDB, AWS CloudFormation, AWS OpsWorks, and CloudWatch. The mobile app does not support the AWS GovCloud (US) region. For a full description, see the AWS Console Mobile App page. We plan to add new features to the mobile app. Tell us what you need using the feedback link in the app.

Q: Is MFA supported?

Yes. We recommend using either a hardware MFA device or a virtual MFA on a separate mobile device for the greatest level of account protection.

Q: Can I create resources?

You cannot create resources in the current version. However, we’re considering this for future releases. Please use the feedback link in the app's menu to tell us what you need.

Q: Can I download S3 objects?

You can use the app to generate a pre-signed URL for an S3 object. A pre-signed URL grants time-limited permission to download the object. Read more about pre-signed URLs here.

In order to open a pre-signed URL for an S3 object in your device's browser, use the app to navigate to the S3 object's detail page and tap "View in browser". Your device configuration will determine what actions are possible with the object.

Q: Can I view my current AWS usage charges?

Yes, you can view your current usage charges in the app. Simply visit your Billing Preferences page and select the checkbox to Receive Billing Alerts. In order to view usage charges, your identity must have permission to view CloudWatch.

Q: What time period and services does the Service Health section cover?

The Service Health section covers all AWS services in all regions for the previous 36 hours.

Q: What versions of Android are supported?

iOS 5.0+ and Android 2.3+ are supported.

Q: Does the app support tablets?

The app is currently optimized for iOS and Android phones, but it works on iPad and Android tablet devices.

Q: What Android app permissions are required?

Network communication

Full internet access (used to contact Amazon Web Services)

View network state (used to gracefully handle network loss)

Q: My app is having trouble. What should I do?

From your phone's home screen press the menu and select settings. From the settings options, go to Apps, select AWS Console, and press the clear data button. The next time you start the app, the app will be reset.

Q: I lost my phone. What should I do?

We strongly recommend that in addition to signing out of the app when you have completed your tasks and using a password lock on your phone, you use an IAM user to manage AWS on your phone. If you lose your phone, you can remove the IAM user's access.

Q: Can I provide feedback?

Yes! Click the Feedback button in the app's menu. We’re eager to hear about your experience with the app.